Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33302e302f32332d3233203d3e203633383632.roa
File:                     3130332e34392e33302e302f32332d3233203d3e203633383632.roa (raw, json)
Hash identifier:          x9ie0gdVt6kqpJpvl8P8pC6xGTnAL3Dd9dPjO5yasC8=
Subject key identifier:   E7:78:C1:38:E7:8C:3A:27:D4:9B:ED:2E:95:D3:B9:E9:04:E4:14:62
Certificate issuer:       /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
Certificate serial:       7CB22404E4B7C13B583CD9A22AD60A55E49CC77F
Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33302e302f32332d3233203d3e203633383632.roa
Signing time:             Mon 31 Jul 2023 00:14:31 +0000
ROA not before:           Mon 31 Jul 2023 00:09:31 +0000
ROA not after:            Mon 29 Jul 2024 00:14:31 +0000
asID:                     63862
IP address blocks:        103.49.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl
                          rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 13:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b2:24:04:e4:b7:c1:3b:58:3c:d9:a2:2a:d6:0a:55:e4:9c:c7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
        Validity
            Not Before: Jul 31 00:09:31 2023 GMT
            Not After : Jul 29 00:14:31 2024 GMT
        Subject: CN=E778C138E78C3A27D49BED2E95D3B9E904E41462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:42:89:51:ff:8c:cf:01:fa:ed:70:d6:6e:f4:
                    10:00:84:cd:2a:04:ad:d9:c6:32:28:da:cd:0d:58:
                    9f:67:91:a9:19:52:73:6b:68:85:d2:2e:70:6f:35:
                    62:0d:12:9d:81:c6:bd:95:ea:09:12:b5:40:24:7c:
                    e5:c6:ae:6c:b6:b8:23:28:3f:e5:e2:1d:5b:31:61:
                    2f:6e:23:5c:2c:27:d6:7c:16:8e:99:47:49:e9:16:
                    87:fe:ff:3c:96:82:56:0e:fd:78:48:bd:99:a1:fd:
                    b8:6c:03:f2:af:93:aa:1a:a5:45:f2:0b:21:c3:ae:
                    70:8c:f3:c3:25:b1:ea:c8:4c:5b:47:d9:25:9c:3b:
                    b4:13:0c:92:7b:69:01:9d:08:6d:57:e4:71:39:19:
                    7b:ad:81:1f:74:91:a7:f4:d6:bb:69:03:cc:f2:ed:
                    74:4b:a8:82:a6:1c:20:f4:79:b2:9c:5e:d6:67:ab:
                    00:2a:b6:4b:47:a4:97:64:ff:0d:af:af:ef:fd:b7:
                    94:6a:c9:34:c4:18:d3:75:38:87:65:3c:96:97:cc:
                    6a:ee:4c:ef:de:af:14:3b:d7:82:26:4e:5f:26:6c:
                    86:58:65:43:f1:ef:8b:d2:bd:57:fc:ce:db:a2:9a:
                    a0:6b:5c:07:9b:31:90:bd:0b:ee:d2:ee:aa:cb:01:
                    f7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:78:C1:38:E7:8C:3A:27:D4:9B:ED:2E:95:D3:B9:E9:04:E4:14:62
            X509v3 Authority Key Identifier:
                keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33302e302f32332d3233203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:ca:ad:a1:16:c5:12:8f:03:aa:93:d2:59:87:e9:95:ff:92:
         d3:7f:12:7c:f7:39:83:71:8f:0e:f2:41:e2:1f:85:9d:56:52:
         e2:82:8c:ef:c0:d2:72:89:ef:6a:a8:75:e9:79:39:1b:16:65:
         6f:22:9e:54:a2:3f:32:f0:73:62:96:8f:ed:8d:06:49:81:6d:
         61:69:9c:7a:22:dd:c3:4f:ea:61:0a:b9:fa:b9:80:8c:ec:c3:
         ab:e9:c7:a4:c5:32:9c:5b:cb:16:10:93:c2:22:6a:3e:ec:3f:
         e5:b2:cf:ba:a1:e2:03:eb:64:4b:69:d4:1c:f0:dc:0a:15:2a:
         6e:58:1b:27:dc:4e:f6:5f:f0:a0:55:88:e0:51:bc:00:b7:c1:
         02:7b:47:77:33:ad:d2:22:cd:2d:9c:ee:01:71:ec:3e:2f:8a:
         be:58:ac:b4:e0:47:48:c8:72:3c:bb:44:23:7d:3e:92:40:6e:
         55:54:3f:3f:0a:c9:ae:c0:05:a1:ba:89:b1:96:86:73:93:ab:
         12:d6:9a:7f:fb:94:ad:1c:72:ad:57:ba:b5:8f:e7:67:78:52:
         4f:9a:01:69:ae:bd:60:c3:39:29:e5:e7:e5:8d:6e:a7:64:0b:
         08:fa:e6:3a:ef:f9:55:bb:63:1c:41:ad:d1:1d:5a:4b:f8:41:
         cc:c0:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 09:34:04 2024 by rpki-client on console-fra.rpki-client.org